CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.
  • CVE-2026-73329

    🚨 CVE-2026-73329 CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute...
  • CVE-2026-73330

    🚨 CVE-2026-73330 CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute...
  • CVE-2026-73331

    🚨 CVE-2026-73331 CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or...
  • CVE-2026-73332

    🚨 CVE-2026-73332 CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged...
  • CVE-2026-73412

    🚨 CVE-2026-73412 Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix...
  • CVE-2026-73413

    🚨 CVE-2026-73413 Shescape is a simple shell escape library for JavaScript. From 2.1.11 until 2.1.14 and 3.0.1, the flag-protection loop in compose...
  • CVE-2026-73414

    🚨 CVE-2026-73414 Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/win/cmd.js...
  • CVE-2026-73422

    🚨 CVE-2026-73422 Astro is a web framework for content-driven websites. From 2.9.0 until 7.1.0, Astro's server-side View Transition CSS generator...
  • CVE-2026-73423

    🚨 CVE-2026-73423 Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs...
  • CVE-2026-73425

    🚨 CVE-2026-73425 Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify adapter converts each...
  • CVE-2026-73427

    🚨 CVE-2026-73427 Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to cross-site...
  • CVE-2026-73429

    🚨 CVE-2026-73429 Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a...
  • CVE-2026-73430

    🚨 CVE-2026-73430 Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by...
  • CVE-2026-73490

    🚨 CVE-2026-73490 Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior...
  • CVE-2026-73491

    🚨 CVE-2026-73491 Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From...
  • CVE-2026-71469

    🚨 CVE-2026-71469 A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer...
  • CVE-2026-71471

    🚨 CVE-2026-71471 A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch...
  • CVE-2026-71473

    🚨 CVE-2026-71473 A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can...

Статистика статей

Статьи
53,088
Просмотры
262,891
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху